My favorite part is:

> All data collected through the TCF must now be deleted by the more than 1,000 companies that pay IAB Europe to use the TCF. This includes Google’s, Amazon’s and Microsoft’s online advertising businesses.

It's not just that they need to find new ways to screw users. It's that since they screwed users, they also must lose their ill-gained data. Which will probably be a nice deterrent against them pulling the same shit again.

Edit: loose -> lose

there is no data collected via TCF:

https://github.com/InteractiveAdvertisingBureau/GDPR-Transpa...

CMPs are the popups that save the preferences and thus enable the collection of the data.

IAB only provides a spec.